Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privilege levels to trigger automation that could compromise the supply chain.